Behavioral task
behavioral1
Sample
4040ea60d5096367ed51fbc49cbc04b4_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
4040ea60d5096367ed51fbc49cbc04b4_JaffaCakes118
-
Size
20KB
-
MD5
4040ea60d5096367ed51fbc49cbc04b4
-
SHA1
0db91a7493c712a7b510a8bd83706a75898432de
-
SHA256
1a28691819851033eb5c51506523f6bf349a7d541e3b27ebc62e59124b384ddd
-
SHA512
0ccad158ddaaa77bbc601152c761711ebbcdd8cf4c3017923ca74a784fba5b615c7114b0868e64c1809590c76e5e3d3819d59a787a2aa2bbf71e9afd65a18001
-
SSDEEP
384:6fU1Wv2KCZCI+S8s/MoE3P4z9Mz/uWTIS0iZ4GfcAqDsCRn:6fUm2KC9A32QzCwvqzn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 4040ea60d5096367ed51fbc49cbc04b4_JaffaCakes118 unpack001/out.upx
Files
-
4040ea60d5096367ed51fbc49cbc04b4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ